i think there was some code that was simply commented out or somehow conditional, probably in /sys/src/9/boot, that if enabled would force a prompt for the password. the code seems to have gone completely now because getpasswd is still there but completely unused.