Only return password for account session flow if the caller is signed with system key and have get_password permission. am: 9342e137c6 am: 8b75ebf0bb
am: adc906206a

Change-Id: I3c9aee82df05e9a74eed960c1d03ea5d9fe477d7