passwd-style override of core authentication