Officially deprecate passwordsalt

Hopefully this prevents people from using it in the future.
Add `@deprecated`, so searching for that string also finds it?