One reviewed step instead of a hand-typed sequence on the host: back up the config, convert the passwd file into the plugin's store with every hash intact, rewrite mosquitto.conf, restart, and prove the server and the health probe reconnect. ROLLBACK=1 restores the previous config. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KGcjxF1cNLcuwc3DAPcnfj