- pwquality is disabled because otherwise needs the cracklib dictionaries. - openssl crypto backend is used rather than libgcrypt to avoid extra deps.
- pwquality is disabled because otherwise needs the cracklib dictionaries. - openssl crypto backend is used rather than libgcrypt to avoid extra deps.