Fix a _potential_ flaw in password_hash()