If changing root_url after installation is allowed, then this should be
called at that time or make it clear that the admin has to do this manually.

We should also document the htaccess role somewhere.