Comment # 11 on bug 1233373 from Antonio Feijoo

(In reply to Michael Pujos from comment #7)
> (In reply to Antonio Feijoo from comment #6)
> > 
> > > If you manually run 'systemd-tty-ask-password-agent --watch' in a terminal,
> > > it never returns, so could it just be that and to be expected ?
> > 
> > That is certainly what man systemd-tty-ask-password-agent(1) states.
> 
> Understood. But then, it would be normal behavior for the
> systemd-tty-ask-password-agent processes (spawn by
> systemd-ask-password-console.service) to remain running forever (and the
> service to remain active as well) ? :

I'd say it's designed this way.

> 
> What I do not understand is the reason this --watch option is used and what
> it does exactly.

The agent with --watch continuously process password requests. The `Password
query on /dev/tty1 finished successfully.` message does not mean that the
password inserted is valid to decrypt anything, so you'll see many messages
like this until the process that needs a password (which is a different
process) gets the one that decrypts what it expects.