Device passwords now use scrypt