I would if it's not already asked

I changed it to be sure, but it allow to check priviliged data without any authentification, so I'am not sure it got the password, it more got the access of the account from what I seen.