There's also a unicode-handling bug in the URL request library, and we're storing the passwords unsalted … so if we salt them with emoji, we can close three issues at once!