working template + root passwd feature