- Use perl crypt with some magic rather than openssl to hash root password, either generated or provided by user. - Remove the undocumented dependency on openssl. - Add a hash_method option to configure the hashing algorithm. - Permit md5, sha256 and sha512, and use sha256 as default. - Remove TODO entry about "more random" passwords. - Remove an ugly system() call.