Directly setting a hashed password
More fun with attributes
Additional protection against rm -rf *
Keeping diffs out of the audit log
Recording the change
Delegate the edit