Insecure works now. Root-to-user auth still broken.