do sasldb2 store passwords as plain-text?