replace /sbin/nologin with /bin/false for compatible