Adding multiple passwd/group/shadow controls

[cmhe]

This MR bundles some additional checks related to account setting.

I can split those up into multiple MRs with an issue each, but might be easier and simpler to just discuss these changes directly.