If I'm not mistaken, the password set in the XML directory is only read when the initial record is created in the database.