As it turns out, a password is required for every user.  We'd have to do a schema update to get around this.