The CLI needs to prompt the user for a password if (and only if) the connection to the native interface requires it.