add a _password_encoding field