Could asking for a password here also be because folks are using http instead of keys? We often end up teaching with http to avoid the key generation step.