Comment by fanf2

If the cache gets leaked, you don’t want any miscreants to be able to bruteforce passwords from the cache keys.