There could be root-only VM appliances, for example,
and ROOTPW is now handled through this feature.