First implementation of password and salt generation

last will win. moreover, we don't allow multiple salt generators.
only one is used in listener.