make crypt return an unmatchable hash rather than NULL on failure