shadow: 'useradd' copies root's extended attributes