use gpg to generate random password if available