The password needs to be available prior to logging in, this is why we need to set `neededFor = users`.