Refactor: pacemaker-based: make string ownership clearer

Coverity mistakenly thought p_conv.appdata_ptr was leaked because
Pacemaker didn't free it. However it was set as the response by
construct_pam_passwd() and would be freed by its caller (a PAM module).

Make the ownership clearer by doing the copy in construct_pam_passwd().