I installed a CH from debian repos (just copied from docs) and installation process asking me for a password, I typed my testing password ended by "();" witouth quotes.

After install I can access without any password.

users.xml show like "<password></password>" for default user.

¯\\\_(ツ)\_/¯

* The second is important for Docker and systemd-nspawn.
          * When the container has no capabilities,
          * but the executable file inside the container has capabilities,
          *  then attempt to run this file will end up with a cryptic "Operation not permitted" message.
          */
#if defined(__linux__)
        fmt::print("Setting capabilities for clickhouse binary. This is optional.\n");
        std::string command = fmt::format("command -v setcap >/dev/null"
            " && echo > {0} && chmod a+x {0} && {0} && setcap 'cap_net_admin,cap_ipc_lock,cap_sys_nice+ep' {0} && {0} && rm {0}"
            " && setcap 'cap_net_admin,cap_ipc_lock,cap_sys_nice+ep' {1}"
            " || echo \"Cannot set 'net_admin' or 'ipc_lock' or 'sys_nice' capability for clickhouse binary."
                " This is optional. Taskstats accounting will be disabled."
                " To enable taskstats accounting you may add the required capability later manually.\"",
            "/tmp/test_setcap.sh", fs::canonical(main_bin_path).string());
        fmt::print(" {}\n", command);
        executeScript(command);
#endif
        
        if (is_interactive && has_password_for_default_user)
        {
            if (ask("Allow server to accept connections from the network (default is localhost only), [y/N]: "))
            {
                std::string listen_file = config_d / "listen.xml";
                WriteBufferFromFile out(listen_file);
                out << "<yandex>\n"
                    "    <listen_host>::</listen_host>\n"
                    "</yandex>\n";
                out.sync();
                out.finalize();
                fmt::print("The choice is saved in file {}.\n", listen_file);