do not toggle secure_password flag upon users backup, add fixme comment