auth

Overview ¶

Package auth hashes and verifies the uninstall password. Only the bcrypt hash is ever stored (by the scm package); the plaintext is verified in memory before any authorized teardown. This is the gate that makes uninstall require the parent/accountability-partner's password rather than just admin rights.