In most cases, anyone that has application level access can already do the things an ordinary user needs authentication for. The password is irrelevant, unless

In most cases, anyone that has application level access can already do the things an ordinary user needs authentication for. The password is irrelevant, unless you want to find it out to access another system you don't already have permissions for.