11e49612c8
XXX: This avoids the issue of supporting separate -l -y -k, but is the behavior correct? Should passwd -p disable all other passwd methods? Should it become the default if compiled in?