'Password Override' verdict does not work as expected