replace pwgen by mktemp to reduce dependencies