is that security block on the supertokens side to not go in as root, or on the mysql side to block people remoting in as root?