Security/CWE-916/InsufficientPasswordHash.ql