cargo-cult the password (openssl) stuff from the opsworks mysql cookbook, so we don't have to rely on openssl recipe