return hashed_pass for now, mass sets wipe othewise