eventually this will probably be refactored with `operators` into a general purpose password-for-mode facility.