Only return password for account session flow if the caller is signed with system key and have get_password permission. am: 9342e137c6 am: 8b75ebf0bb am: adc906206a
am: afe9a6c768

Change-Id: I78429906634613d502bffcbb5283af7f67eeca33