are they speaking about changing the "shell" field in `/etc/password` as a means of broader access control?

That went away a long, long time ago; the question of "which system am i authenticating myself to" was often already too complicated for that way back when when "shadow passwords" were a new idea.