Follow-up fix: setting LC_CTYPE was not enough on all platforms.
  On Solaris, with my settings, I saw it generate password with only
  digits or 'a'.

  Fixed by setting LC_ALL=C instead.