You have to distinguish. Reporting the untruth to the general password is common and IMO acceptable. But the school's troubleshooter should have had deeper ins

You have to distinguish. Reporting the untruth to the general password is common and IMO acceptable. But the school's troubleshooter should have had deeper insight. Presenting as few details to authenticated support personnel as to unauthenticated would-be users is inappropriate.