Use optional PasswordAuthenticationCallback in client mode
When coding an app as the Initiator the API is not allowing to check the server OID & Password using the security callbacks, but only setting the server OID in a session variable.
The PasswordAuthenticationCallback must be used in this case, but without any further consequences to the protocol logic if it was not provided, as it can continue working without it and it is not mandatory.