enforce_for_root