Add note about WERR_BAD_PASSWORD when 'security = share'