Quoting some rather famous robot: Yeah ... well, we're building our own theme park webservers ... with blackjack and hookers ! (I'll skip the "In fact, forget the park" bit ... lol).
Thanks for you offer, much appreciated.
Since we still seem to be neighbours, I'll refrain from small talk questions about the weather, and instead start taking your offer right here and now 😀
Is there a specific reason you're setting /var/lib/extrausers/shadow to group readable, instead of 0600 ? Since at least on FreeBSD, I see no reason to grant access to anyone else than uid 0.