I'd suggest `$must_show_password` here.