do not require mkpasswd
and even increase the number of possible build results,
because now we have variations in input length.

Also we are explicitly calling bash
because dash does not know about $RANDOM