Default [Q] Clarifying questions..

I'm thinking of upgrading from my GS3, non lte, to the Note 3. As I've looked around the forms here, it would seem as though Knox is an added security measure so t-mobile can more easily detect root?

Is there a way to have root without tripping this counter? Is there a way to flash a custom Rom or kernel without tripping it?

If this has been answered apologize, I did look around before making new thread.

Thanks!

Also on a side note, white or black note 3?