Adding `:manages_shell` as a required feature is the right way to approach this. However, this is going to break the `directoryservice`, `useradd`, `user_role_add`, and `aix` providers.