comment: | The password a user uses to log in; currently visible in plaintext to admins. default: <> flavor: string