Final tweak: allow initial SSH login as root