I would expect this to go on the model manager, and naming it to something clearer which wouldn't require the comment to be explicit, like: `PasswordHistory.objects.create_if_enabled(user)`