password root never kept in memory