Add hint to use passwordAttributes in @KLUDGE_ACL in future