Lock root account
On some systems, e.g. the sd card image for Raspberry Pi, the root user has no password an needs to be locked. On systems using nixos-install the --no-root-passwd flag can be used. The graphical installer also allows to set the root user password or to deactivate the root account.
Resources: