if passwd returns notfound -> reject?