At my company, we call "pepper" the act of creating an account with a known password before stealing the hashed passwords. We turned a joke into a descriptor.