don't re-encrypt password on replace also