use mkDefault on root's shell

This fix makes sure that root's shell can be overridden without mkForce.
Would this make sense? By that I mean, what would break?
also this fixes #3688