I guess that when the user password is required for administrative purposes, the compositor can give a visual cue that normal apps can't. For example...