Move actual password derivation to separate class