In the Wallet::Policy::Stanford package (perl/lib/Wallet/Policy/Stanford.pm) there are these lines (lines 261 and 262) in the default_owner function:
# We have no open if this is not a file object.
return if $type ne 'file';
This does not take into account password objects. I suggest that the line should read
# We have no owner if this is not a file or password object.
return if $type !~ m{^(file|password)$}xsm;