postinst script, nicer pathnames, and read password hash from a file