Not trying to creating any users (and thus changing their passwords),
if these user accounts already exist. This should support (physical
isolation) users better, who changed these passwords already.