Changes: 1.4 --- - fix CVE-2016-6866 - add proper priviledge dropping - use explicit_bzero from OpenBSD to clear password from memory - major code audit and rewrite of some parts (thanks, Laslo!) Approved by <reed>