kpasswd: move roken.h after config.h in kpasswd_local.h