We now expect clients to hash their passwords before they send them to us.