added pwgen since add-vpn-user needs it