user passwords are stored in the fossil repository as plain text instead of a hash.