Avoid masking EOF (no-password-supplied) conditions in auth.c.