bsd-auth support) and that we're unaffected by the CVE fixed in 1.4. suggested by and discussed with sthen