shouldLogIO
needOldPassword and checkPasswordSecurity