Improve comment?  The response isn't really a plain-text password, but we can pretend to PJSIP that it is (so that it just does a verbatim comparison).