Regular users are not sandboxed but passwd is not accessible for 'em