argon2: only enable password-hash dependency if its explicit

argon2: only enable password-hash dependency if its explicit #1126