As the Password APIs are still part of the "Proposed extension APIs" these seem to not be useable in master yet. I guess it still would be reasonable to inspect those in a branch now, allowing to give feedback as long as those are "proposed" and pull the trigger to master once they are moved to stable.