protect against/handle cancellation reading shadow passwords