Extra tests for invalid pwhash strings