Thread-safe PasswordHelper

The field PBECipher._digest makes DefaultPlexusCipher not thread-safe. With PasswordHelper being a singleton, at least it should provide thread-safety.