Lock root after setup