add pwgen package, required by encfschkey, to deployment::creds