You can send arbitrary commands, but they will be rejected unless you provide valid credentials first.