fn legacy_password(username: &str, password: &str) -> String
The legacy PBES2- stand-in for the password, hashed raw and never normalized.
PBES2-