Passwords per the spec, but yes.