Known passwords should be keyed off private IDs, not SIP_URIs.  Larger change than just this line though.