so, it’s still kind of a pain, but you could see a couple of different conditions. Root is not enabled, the “passwd” node should be *. If it is enabled, it is ***** (not sure how many). With that, and the above, you could then tell if root was enabled, or not enabled, and if enabled, if the password had been set, or not set, and when.