Improve site hashing; update example config.

Site hashing previously didn't involve the password, which meant that the
hashes were recoverable (since the domain of all sites is fairly small). Using
the passacre-seeded PRNG means that it's more difficult for these to leak.