hardening: evict extra root logins: initial revamp