AuthorizedPasswords_flush() should only flush users which were added by AuthorizedPasswords_add()