Only return password for account session flow if the caller is signed with system key and have get_password permission.
am: 9342e137c6

Change-Id: I932c85bdc302899b42342d3efc249a5420da764c