Allow buffer and object passwords. Closes #1710