Yes I understand that accounts will be updated during login. Yes I have asked about auth a few times. The reason is vb lied to me and after purchasing I was unable to use the vb usertable as a auth source for mysql_auth on my legacy site. It uses Apache basic auth and we have customized it to read crypt, md5, vb, mybb, and a couple others. If Secret_key is the stored password then we can update to Bcrypt and be happy and peppy once again.
The legacy site uses the permissions from the forum usertable to grant / deny access.