Comment 13 for bug 653132

The pre-filled "root" username only appears when the user's own username was tried and got forbidden (i.e. they authenticated but were not authorized).

I'm not particularly interested in tinkering with the credentials cache very much, but if you want to play with it feel free to send patches.