This reverts commit e375678674. The workaround of explicitly specifying root for the kubelet unit was for pulling images from private registry. Kubernetes now have a dedicated mechanism with imagePullSecret.
e375678674