[shadow] use ALTERNATIVE for remove passwd login