This si so embarassing and it pointed out that we don't actually need a password. Not your key, not your access should be implemented.