auth.validate-login
Check a login form (email, password): the normalised email to look up, or a message for each field to fix.
validate_login in RustTagged credentials
2 capabilities
auth.password-hash
Hash a password for storage as pbkdf2_sha256$iterations$salt$hash, verify one in constant time, and spot weak hashes.
A group of 3:
hash_password, verify_password, password_needs_rehash