just switched to ultra, can recommend
that bcrypt one (ignoring everything past the first 72 bytes) is concerning
