remove root from ACLs

(added by after func if root is present)