update fs_passwd stuff as wrappers around self-service