restrict name of nonroot to 20 chars