diff --git a/sshca/config.toml b/sshca/config.toml
index 3171fdb..76c414b 100644
--- a/sshca/config.toml
+++ b/sshca/config.toml
@@ -15,7 +15,6 @@ private_key_passphrase_file = "/run/sshca/secrets/user/passphrase/user-ca-key.pa
 [ca.user.group_principals]
 "Server Admins" = [
     "core",
-    "root",
 ]
 
 [[libvirt]]