Re: htpasswd: use crypt_newhash instead of bcrypt API

[Theo de Raadt]

> The only thing against using automatic rounds would be having them guessed on 
> a
> weaker machine and used on a more powerful server - doubt though that would 
> ever
> pick something below 8 rounds.

I don't see the concern.  It has a lower bound.