This allows the FE to call the import with both `direct` and `temporary` set to `true` to import from a config without needing a second step.
Once the FE is updated to support this, we can keep the unencrypted passwords out of the FE during import-from-config