Don't require old password since the user might not have one (e.g. Voyager with default pin).