The group technique should also manage /etc/gshadow
running grchk on CentOS7:
It warns about something with certain groups.
It's not an OS issue, but one with the policy:
Both the user and the wheel group are maintained from within Rudder.
'abcabc' is a member of the 'wheel' group in /etc/group but not in /etc/gshadow
I don't yet know what this means.