Cobalt should modify users in var/lib/extrausers rather than /etc/passwd

Note: this shouldn't be merged until we're sure we won't be deploying again to existing servers.