Unix: Tracking down ghost accounts