docs: @Override
      public boolean validatePassword(String cleartext, String encrypted) {
          // If local account has no password, do not allow login.
          if (encrypted == null) {
              return false;
          } else if (encrypted.startsWith(MD5_PREFIX)) {
              encrypted = encrypted.substring(5);
              return md5Encryptor.checkPassword(cleartext, encrypted);
          } else if (encrypted.startsWith(SHA256_PREFIX)) {
              encrypted = encrypted.substring(8);
              return sha256Encryptor.checkPassword(cleartext, encrypted);
          } else {
              throw new IllegalArgumentException(
                      "This portal password service is only currently capable of validating MD5 and SHA-256 passwords");
          }
      }