Only do password/certificate validation on new user