We have to use the same factor salt for checking passwords. Also we
ensure of removing revoked credentials.