What's the best way of keeping an /etc/passwd (and /etc/shadow, group etc) in sync between systems which need to have the same accounts? The systems will *not* be on the same network. One will be a private host and one will be a public host (though may need to keep more than two hosts in sync).