Because we now allow editing, only require password fields if this is a new object.