I guess that's up to what you want the `skip_passwords` attribute to do. Right now it just causes the complete skipping of the `access_grants` and `replication` recipes. That would cause this code to not really matter.  

I'm not sure what it should do if you set `skip_passwords` but explicitly added these recipes to the run list.