Android System [UID] 1000 Root Permission Request
It may due to Wanam Xposed 2.4.7. An XDA post states:


  the new Wanam Xposed v2.4.0 did Auto activate "Disable Knox notifications" when Knox Apps are installed. With 2.4.1 he Removed "Knox disabling at boot".