We set the privacy type to PASSWORD only when the user sets the password