Add auth_read_shadow for run_init_t to support pam-less openrc