tests: plug leak in aggregate.
database: plug leak in add user for hashed passwords.