Site administrators should be able to set (override) reader passwords.