only allow root from management host

closes #18