Add a traffic analysis defence to SSH2 password authentication