Don't tell users passwords are in cleartext unless they are.

Initial passwords are stored in cleartext, but this doesn't
count since initial passwords are random.