ws: Don't hand around passwords unnecessarily

If we're not going to use them, it's just silly to have them all
over in memory.