enable and use shadow passwords by default