r17283: use the async calls of auth_check_password() and gensec_update()