Should switch to salt+hash. However, needs to be backwards compatible. May also include a CLI option for generating passwords.