encrypt_pw: avoid '+' for crypt salt