[db-wg] Plain text passwords in email updates