<strike>crypt is the hashing function, not the password checking function</strike>
So returning the original hash for a valid password is the success case.
So returning the original hash for a valid password is the success case.