Scripting add of a package source

I don’t seem to be able to script adding a local package source in 7.17.1. At first glance the command seems simple enough:

/system/package/local-update/update-package-source/add user=foo address=99.99.99.99

However, there doesn’t seem to be a way/option to specify a password, and it seems one is required. If you issue the command from a terminal session then you’re prompted for a password, but if you’re trying to load a configuration script then the script just hangs at that point.
Have I missed something obvious?

I should add that Winbox provides a dialogue box for this data with a password field, and defaults it to (presumably) empty if one is not provided.

I raised the issue with Mikrotik (SUP-179058). They’ve confirmed it is an issue and it will be fixed in an unspecified future release.