Oh, this one beats base64-encoding /dev/random's output and using that as the "password"...