encrypt LDAP system password

also store salt used to initialize AES block vector

fixes #398