Cleanup password stuff

No need to support old Sf as pointed out by stof so stripped that,
and remove call-by-ref to avoid insane memory usage