#931994 improve key strengthening, add rounds=65536 to /etc/pam.d/common-password