added an init so that you can make a first master password without manually
hashing the master, also limited imports