The password needs to be available prior to logging in, this is why we need to set `neededFor = users`.
Move the functionality of both modules into a new clanService. root-password was previously just a special case of user-password. This migrates it into a deduplicated clan service and adds checks