Brink actually does all it's work on a copy of the passwd (actually shadow) file, but I guess it's still working on the file.