> 2. Use shadows nologin (I didn't see a compile switch in our spec file that disables it..). Actually it is built. In the shadow.spec we remove shadows version of nologin by hand.