ocserv: prevent ocpasswd from using sha2crypt