The user domain is a bit inconsistent. It has "mod" that changes shell, groups and home, but passwd is separate. Instead of mod, just put those commands at the same level of del, add, password etc. so that ao user shell shows the shell of the user and ao user shell set <new shell> changes it, and the same for ao user groups, ao user groups add, ao user groups del, and ao user home, ao user home set <new home>
