609fd80936
The only storage scheme we support is a single declarative user with fixed uid/gid. The default_fields are overridable if these fields leak in from LDAP, so promote them to override_fields instead.