security: handshake V2

[JarbasAl]

V1: current password Hsub handshake

V2 proposal: Encrypted Hsub handshake

the main differences:

• we don't leak the salt this way
• if someone could theoretically break SHA256
  • no leaking the password by reversing the hash.
  • if AES is broken then all of hivemind crypto is broken too