data: allow password-auth to be disabled
    
    it could be you want one of the other methods to be strictly required.
    This commit just adds the config key for checking that.