Comment 7 for bug 48918

For the record, we do run shadowconfig on if passwd/shadow is true, which is (a) the default and (b) preseeded by this Kickstart file. I think it must be something a little less obvious.