Added search for /etc/shadow