README note re. root user without password