add PasswordPermission