switch to always including root with empty default user list