system users have implicitly a *'d out password