Re: few days?
"The passwd file needs to be universally readable" hold it hold it...
Never heard of /etc/shadow ? So you are about 30 years behind. THIRTY YEARS!
Password shadowing first appeared in Unix systems with the development of SunOS in the mid-1980s, System V Release 3.2 in 1988 and BSD4.3 Reno in 1990.