As suggested by brett.dalton@moodle.com may be it's worth moving the password into it's own table. There's no reason it should be passed around in user objects everywhere.