if passwordless is not empty and is not boolean firstly require password for all commands and then whitelist commands that do not require password