Operator accounts live in content_operators. A null password_hash cannot sign in until the CLI sets one.