Well, I found the answer.
It was me -- I was using a $variable to set the password, but in the Add Account step I was using the same variable name, but as $$variable -- they weren't the same. So when I changed the password using Manage Security, I suddenly knew what the password was.
Tricky little buggers, those $ and $$ variables. Gotta keep 'em straight.