I don't mind (it will allow us to just throw away entire username/password part and make `demands` code more concise). But  username & password is something we used at all times for service configuration.  So probably we should ask opinion of other people.