disable internal (shadow) password and group functions