#379875 Should shadow passwords be enabled earlier?