r10221: add "free pass for root" in svcctl and default winreg access checks