@manton makes sense! I think I wrote that before I saw that app-specific passwords are a thing.