It uses them, too. For convenience's sake (because everything else is locked under other passwords) I use the same usernames/passwords for my local machines, and without prompting me my new Mini was able to access SMB shares on other machines. I'm not terribly worried about it because this password is unique to local logins on my own network, but it was a little unnerving.