dfs: always call create_conn_struct with root privileges