- improve "-l" option. Do not reset faillog if it's used (#213450).
- do not replace login.defs file (#190014)