will break the system without either MKPAM=no or a customized PAM config. As suggested by Ian D. Leroux on current-users and in PR 45263, but with different text.