password might be null when auth_relay is none.