this would be inforcing policy. since by default the mysql server on
Debian doesn't have a database password, it's reasonable to allow
modification (creation already works) of database servers without
passwords.