pass a buffer into bcrypt for the encrypted output, instead of a shared static buffer