alternatively we could check BANGO_AUTH['PASSWORD'] is empty and fail, assuming it has never been configured