The default flag should be for default passwords only. Otherwise,