[sounds]

That only detects enabled root users, which is a start but may include innocent people who have set a root password to protect their machines.