How can client access as root be avoided?
Rather than ssh as root, you can create a low-privileged backuppc user on the client, and use sudo on the client to run the backup command (eg: tar or rsync) as root. Josh Marshall reports he uses ssh with a non-root user (e.g. backuppc) and use sudo as part of the rsync command on the remote end.