can create unassigned, passwords/vercodes cannot start with 0 and
kit_ids are all lowercase