fix spurious errors in refactored passwd/group code