chore: hash renamed to password in rights
Merge remote-tracking branch 'origin/0.4' into 0.4