For the 'passive' option it says "don not".
vyos@edge2# set protocols bgp 65020 peer-group AS65020_PEERS Possible completions: > address-family BGP peer-group address-family parameters > capability Advertise capabilities to this peer-group description Description for this peer-group disable-capability-negotiation Disable capability negotiation with this peer-group disable-connected-check Disable check to see if EBGP peer's address is a connected route ebgp-multihop Allow this EBGP peer-group to not be on a directly connected network +> local-as Local AS number [REQUIRED] override-capability Ignore capability negotiation with specified peer-group passive Don not intiate a session with this peer-group password BGP MD5 password remote-as Peer-group BGP AS number [REQUIRED] shutdown Administratively shut down peer-group > ttl-security Ttl security mechanism update-source Source IP of routing updates