I tend to leave the password on the root account enabled (consider setting the root password to something insane)