Apple’s “blank root password” fix needs a fix of its own – here it is