Use salt for all passwords in db.py

The password command now defaults to `--user-id=0` so
that all passwords are salted. Calling `script` also salts
the password as if `--user-id=0` were passed but no option
to change the user-id is given since it must be user 0.