# User to use for the process. This user needs access to only user and
# password databases, nothing else. Only shadow and pam authentication
- # requires roots, so use something else if possible.
+ # requires roots, so use something else if possible. Note that passwd
+ # authentication with BSDs internally accesses shadow files, which also
+ # requires roots.
auth_user = root
# Directory where to chroot the process. Most authentication backends don't