spec: Change useradd/groupadd to handle in security-manager.