chiark / gitweb /
firstboot: change /etc/shadow access mode to 000