Function ensure_root_sender 

fn ensure_root_sender(
    actual: Address,
    expected: Option<Address>,
    what: &str,
) -> Result<()>

Ensures what is signed by the expected root account when one is known.