Comment 8 for bug 1854594

> this means, modify this user, read input from the FD supplied after -h, in this case, stdin.

no, it doesn't.

it really does mean that *this* bug: https://bugs.launchpad.net/cloud-init/+bug/1855170 was getting so much in the way, it broke my reading comprehension.

and that `-h -` was the correct implementation:

from http://man.freebsd.org/pw

      If a value of ‘-’ is given as the argument fd, then
      the password will be set to ‘*’, rendering the
      account inaccessible via password-based login.