additional root authorized_keys