
Commit c3cab28 removed bits setting the password char that was used to allow typing the password after a failure but before the first question for the new attempt came. Without that code, in complex PAM setups you can end up with a visible password. https://bugzilla.gnome.org/show_bug.cgi?id=687113