If there is no password, refuse access rather than blowing up.
Merge bug25535