Used shell in /etc/passwd, why not more /bin/false?