Personally, I don't believe any business should allow any exchange of passwords. It's much easier to establish a hard rule that forbids personnel from ever sharing or exchanging confidential passwords. It's safer, too. But each business has to assess its own culture and security concerns in making this choice.