TYPE in ('password-history', 'password') AND ALGORITHM is NULL