Auth rule with other directives

I could reproduce this on latest master. I am accepting this as a bug. The reason it is failing because it is trying to apply query auth rules on checkCredentialsPassword query.