Fixes related to a few issues in the locked root account test I somehow managed to overlook in the initial commit.
The root account checks are applied to generated and deployed images to make sure that root account is locked, except for live ISO.