It doesn't work yet.
Insecure works now. Root-to-user auth still broken.