I fully agree - safety first, but the situation is more complex.

In the company recently conducted an information system upgrade Infor ERP Visual (formerly Lilly Software)
It is of course a client-server system (but not a thin client!)

Because it is the U.S. product must be localized for our country and it takes a lot of time (translation, national forms, tax laws, ... , testing)
It will sound strange, but the new product upgrades is already old in comparison with the current U.S. version - the difference is about 4-5 years!
Old and 'new' version uses a large number of INI files that the user must have full access. (%programfiles%\visual601\*.ini and %programfiles%\visual631\*.ini) btw. INI files are not interchangeable between versions.
Both versions are currently installed at stations to validate the functionality - the old version will be removed approx 1 year.
The IS client allows redirect path to the INI files, but these settings are common to both versions ... so problem

Because the user has full access to INI files and the GUI allows the pre-filling user name and password I was looking for a way to remove the password if the user fills it.