note --with-group-name-max-length for shadow