shared/follow: Fix bug where burst message couldn't be sent.
client/listener: Attempt to hash passwords without holding any locks.

If things change while we're doing so, we might have to hash the password
again. But in the vast majority of cases, this doesn't hold up the node
while hashing goes on.