To follow up on this, we had some more discussion internally and came up with a compromise. We could start by doing both: allowing for password_hash as a parameter, or allowing for the user/password combination with explicit documentation that the latter is unsafe. This would keep it in line with the existing modules, while allowing for the more secure version.