Looks like it doesn't retain the password, it just uses it to grant itself access to a config database which it can then modify at will later. Not that that is much better since accessibility permissions are kind of the keys to the kingdom and being able to modify the contents of that database is a highly restricted operation for a reason.