Only return password for account session flow if the caller is signed with system key and have get_password permission. am: 9342e137c6 am: 8b75ebf0bb am: adc906206a am: afe9a6c768
am: 26bf3498cb

Change-Id: I7aea23c2096f435d3111941d9c1ee64151bc761d