When passwords are passed across the SPI interface, they should always be in the form that they were typed in by the user. If the NP uses case-insensitive passwords, then it should do its own case conversions. Following this convention is important for case-sensitive NPs and password synchronization to work properly.