[urcd] security: salt channel passwd+dst.lower() to avoid lookup collisions