only check root on openvz hosts