It only requires the password when the password is different for each membership and the client uses one of those passwords.
If the client uses the main system password then both will show, not requiring a password.
This is a security feature because an account could easily be hacked if it didn't do this.