kadmin: refactor set_random_password