move pwgen to util.sh