Exactly. Imagine if you had a "Million dollars for the login credentials of FBI/CIA/DOE employees!" program. Just because the employees want the million dollars, does not mean the payer is authorised to access those systems.
OK, I guess you have a point, if the information there is not sole property of the password holder - especially as in the case of FBI, where FBI employee has access not to his collection of lolcats pics but to something more important. I guess one could argue on Facebook you can access other's information too, so it still applies.
