no need to set bcrypt_rounds, only used in one place.