Only return password for account session flow if the caller is signed with system key and have get_password permission. am: 9342e137c6 am: 57e38003e8
am: 914e549bce

Change-Id: Ie87eecaac3bee802ea72a24d80dd4145dd5fdd6d