Fix possible brute forcing with estchkpass