update PBKDF salts, scrypt salt (empty), stretch with 20k+64/8/1+20k

On my fast 2012 laptop, that will probably take 270ms. On a more-typical
1.8GHz Atom, probably 1.5s. A slow Raspberry Pi working by itself would
take 8s, or probably 3s with an scrypt-helper.