That's not true at all. You can say you'll (go to the media/refuse to sign off on the regulatory paperwork/refuse to change the code that way and they don't have anyone else who can do it/refuse to change the password) or any of a number of other things.