For the 'passive' option it says "don not".
vyos@edge2# set protocols bgp 65020 peer-group AS65020_PEERS
Possible completions:
> address-family
BGP peer-group address-family parameters
> capability Advertise capabilities to this peer-group
description Description for this peer-group
disable-capability-negotiation
Disable capability negotiation with this peer-group
disable-connected-check
Disable check to see if EBGP peer's address is a connected route
ebgp-multihop
Allow this EBGP peer-group to not be on a directly connected network
+> local-as Local AS number [REQUIRED]
override-capability
Ignore capability negotiation with specified peer-group
passive Don not intiate a session with this peer-group
password BGP MD5 password
remote-as Peer-group BGP AS number [REQUIRED]
shutdown Administratively shut down peer-group
> ttl-security Ttl security mechanism
update-source
Source IP of routing updates