called when new user is created or exsisting password is changed */
source not stored for this graph (policy: none)
nothing calls this directly
no test coverage detected