support new boot option encpasswd to provide hashed password, refactor passwd/ssh...