encrypted root