Bug 27600: Remove password check from `add_hold`