do not require mkpasswd and even increase the number of possible build results, because now we have variations in input length. Also we are explicitly calling bash because dash does not know about $RANDOM
35e1af7