pwhash_scrypt(): do not allow outlen to be > SIZE_MAX