allow for pdagent user to have /bin/false as its shell