Thread-safe PasswordHelper

The field PBECipher._digester makes DefaultPlexusCipher not thread-safe. With PasswordHelper being a singleton, at least it should provide thread-safety.

https://bamboo.zion.sonatype.com/browse/NX-OSSF8-1