ssh-adduser: fix permissions & ssh password vuln