More restrictive valid() in nsldap, salted-sha1 and ssha-opencl.