why is dovecot "Allowing any password"

[mj]

ok, fyi:

I have now also tested/confirmed this, while looking at the logs, and 
indeed:

Even when the connection is denied because of a wrong password, the 
message "Allowing any password" is showing up in the logs.

Perhaps it is because we have set debug options:

> auth_debug = yes
> auth_debug_passwords = yes
> auth_verbose = yes

It would be nice if the "Allowing any password" could be rephrased, or 
taken out. It really had me scared for a while.

Thanks Aki,
MJ