Normally you can scp a file as root on a machine if you allow users to ssh as root. I'd prefer to disable ssh directly as root since its yet another attack vector we can shut off. sudo and su allow a ...