I think its a good idea to validate usernames and passwords, but you should do it in the AccessManager instead of the CLI. The reasons for this preference is that its the single point of validation in the event that we want to provide an additional interface for people to manage users (besides this CLI). Additionally, it allows us to swap out JCommander for a different CLI framework in the future while still keeping the validation logic