Importer support for migrated passwords

Maybe include it but default it to off? Explain the downsides in the place where you would enable it?