Thanks @pquerna! @smashwilson is filling that part in now.

We definitely need to advise people to make their apps change user passwords on next login as well as API Keys, auth tokens, etc.