Can I update a mntner object without inserting the BCRYPT hash?

No. You must replace the "FILTERED" string in the auth attribute with the actual encrypted hash otherwise the update will fail.