system: make "noroot" the standard option with 27.1 #9352

As discussed internally, we want to aim for this to be the new standard,
but we will not migrate any existing setups just yet.  This may need more
documentation/annotation for components (mostly legacy plugins) where this
won't work, but it's a very good start to root these out via user reports.

src/etc/config.xml.sample

@@ -28,6 +28,7 @@
     <timeservers>0.opnsense.pool.ntp.org 1.opnsense.pool.ntp.org 2.opnsense.pool.ntp.org 3.opnsense.pool.ntp.org</timeservers>
     <webgui>
       <protocol>https</protocol>
+      <noroot>1</noroot>
     </webgui>
     <disablenatreflection>yes</disablenatreflection>
     <usevirtualterminal>1</usevirtualterminal>

src/www/system_advanced_admin.php

@@ -1098,7 +1098,6 @@ $(document).ready(function() {
                 <td><a id="help_for_noroot" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("Strict security"); ?></td>
                 <td>
                   <input name="noroot" type="checkbox" value="yes" <?= empty($pconfig['noroot']) ? '' : 'checked="checked"' ?> />
-                  <?=gettext("(Experimental)"); ?>
                   <div class="hidden" data-for="help_for_noroot">
                     <?=gettext("Make security stricter by running the web GUI as a non-root user. Not all components may be compatible with this feature.") ?>
                   </div>