extend plugin password to avoid sudo (use ssh instead calling chpasswd) (#5654)

Use proc_open() instead of popen() to catch error messages from called wrapper.
Create new wrapper chpass-wrapper-expect.py