Better to move the attrs implementation of set_password here I think.