interface User
extends SelfUser
Returned by the lookups of user-service.ts. It must never be sent as is:
it carries the password hash.
passwordHash: string | null
From hashPassword, as hash.salt, or null for an account from another
instance (isRemoteUser), which signs in there and never with a
password here. The row stores that as ''.