Or use two security keys, one on your root user and another for your own personal IAM user, but you're right, don't use your root user for everyday tasks.