redhat: don't package kpasswd