If the client can securely transmit the password to the system for verification, the system can securely transmit it to the user in the first place.