extensions/mkpasswd: Do not leak /dev/random fd