/var is read-only during compose so authselect could not create its backup dir and fell back to writing PAM/nsswitch files directly. --nobackup keeps authselect in charge of the symlinks.
/var is read-only during compose so authselect could not create its backup dir and fell back to writing PAM/nsswitch files directly. --nobackup keeps authselect in charge of the symlinks.