Generate /etc/passwd and /etc/group statically
Generate /etc/shadow if missing
Add users.lockRoot and users.<user>.passwordFile options