`srp` should be removed here, right? We shouldn't expect new user registrations to include srp verifiers.