Note that authentication can only be done on cleartext passwords