update-pwd-db: be more robust