#4 SCRAM-SHA-1: can use hashed password in client