LoginCandidate

public struct LoginCandidate : Equatable, Hashable
extension LoginCandidate: Sendable

A login stored in the database, minus the encrypted fields.

Reading these never needs the encryption key, so consumers which filter on the cleartext fields can do so without forcing the user to authenticate. See list_candidates().