root and user_transition_deny