Add "See also passwd(1)" to auth(8). Maybe it should be obvious, but for some reason it wasn't to me.