User's password stays in memory uinecnrypted.
vulners.com/securityvulns/securityvulns:doc:4034
vulners.com/securityvulns/securityvulns:doc:4038