[stefan_]

They also had an authorized_keys file so it doesn't seem a stretch that the password login is some device-specific autogenerated value since the engineers would just use PubKey auth.