The attached patch prevents mutt from reading the push buffer when asking for passwords. This is a proper fix for bug 1312. I think it's uncontroversial.