kadm5: add chpass_with_key hook (#397)