Everyone was right about root.txt. It is right in your face. Just run it and see the output. User.txt was a little harder, but focus on the stego. IppSec has a great video on this (10/10). Great job @MrAgent!
I have definitely learned a lot with this box.