the former is correct, the latter is not. actually, this makefile probably should be hacked a bit more, but i'm not up to it now
I don't like this program. passwd -y should do it's job (and it tries to)