security: remove root_plug