allow root to edit encrypted passwords