Default to prevent root user's TCC file

Now the root user will, by default, not be able to create or modify
their own local TCC database file. It can be overridden by using the
`—forceroot` option.