The digestPassword flag can be used to tell the server whether it should compute the password digest itself (digestPassword: true) or if the client has already computed the password digest (digestPassword: false). By passing digestPassword: false with a password-changing command, the client can avoid transmitting the undigested password to the server.