Work around OpenWRT / Busybox shadow password quirks