Exactly. Let me know if you find an answer to this. I have a policy where I will only add a generated application-specific password to really trusted applicati

Exactly. Let me know if you find an answer to this. I have a policy where I will only add a generated application-specific password to really trusted applications (internal OS apps mail, calendar etc), and have gone as far as to sniff all traffic for each of these apps.