Turn on error mode and execute random password generation in a subshell (because Ansible will choke on multiple pipes?)