Also, gen-salt demands to be runned under root, so let's check for it and fail if it doesn't.

tools/gen-salt.sh

@@ -1,5 +1,10 @@
 #!/usr/bin/sh
 
+if [[ $EUID -ne 0 ]]; then
+    echo "Must run as root!" >&2;
+    exit 1
+fi
+
 if [[ $1 ]]; then
     char_num=$1;
 else