Within the WebAdmin, when using an an external auth module the change password field is editable for existing users and is a required field for adding a new user. These values are ignored when using sasl so at least should not be required and at best should not be visible.