compose: Add --check-passwd/group options, to fail if uids/gids change