I just put out a slightly modified version of runnas, that treats the title a little different ... but when you saw the password, were you running an older token file against the newer runnas - because if so, all bets are off on that.