INCOMPATIBLE: switch to SHA-512 for news.arc passwords

Also cleanup shash: pick temp files right, and cleanup on errors.