We have a pretty sizable discrepancy between secure and insecure mode. Specifically: in insecure mode anyone can do anything without any sort of authentication.

I think we should consider allowing password auth in insecure mode. This would allow people to run insecure mode if they are sufficiently confident that they are in a "secure" environment while still providing user authentication.

We would also need to allow password authentication for root. We can probably keep it disabled in secure mode.

We should still warn loudly when running under insecure mode as there's no encryption.

@bdarnell, @petermattis: thoughts?

edit feb 2020: issue subsumed by #44842.