Make passbuff BUFSIZ bytes: passwords might be long, and we save an arbitrary constant.