valid_salt? requires cost also