(you'd have to set giveaccess as well, but that's at least the password generation piece)