assert on password_iterations should allow for the default--None :)