Password can be left blank for updates. Otherwise you have to reenter the password every time you save the auth list