I read “may request” and “may be requested” quite literally. They may request it, but it doesn’t say providing it is compulsory.

I have nothing to hide, but still no intention to provide my passcode.