It just passes it to pem_passwd_cb when calling back to it. So long as all the callbacks happen from within the constructor, we are ok. If not, then the string should be copied into a StringAttr member variable (but in that case the old code would have been very unlikely to work).