add `-a` flag for adding an admin user
explicit conversion of nomnom params - for example this allows all-numeric passwords to be set.
mention that nomnom doesn't work well with rc