Memory overflow due to duplicate usernames and corrupt input parameters in
admin provided password file, hence local only issue.

Regression in unreleased version.

Leak caused by corrupt password file, only occurring on startup or
reload.

Unreleased code, so minor impact.

Embedded 0 characters in a file would prevent the loading of that file.

This could not happen apart from corruption of the file, or by
deliberate manipulation by the admin. Minimal impact.