root-id: make the root identity values configurable