The previous instances of the docker image allowed for passwordless root
login. Update the default shadow setting so the root account to disallow
this.