hostapd: Fix security problem in EAP-pwd