When should the bot ask for the password?
Is it the same password for everyone, or does each person have their own password?
If each person can have their own password, who sets the password, and who can change it?
Is the password case sensitive?

Those are the questions that I can think of right now. If I think of others, I'll post.