Direct root use now blocked by default