Absolutely, we should have added new methods for blowfish or a new class altogether. Also perhaps `Security::_salt()` could have been public and `Security::_crypt()` we a more generic wrapper for `crypt()` instead of only supporting blowfish hash right now.