Using BES Console-based Client Deploy Tool without password

I’ve currently got the CDT installed on a system that has Host-based authentication to other devices (all Linux). Since the CDT computer doesn’t need a root password to connect to other Linux devices I’m trying to use a ‘blank’ password field, but the Fixlet doesn’t allow it. The wizard doesn’t either.

When I disable host-based auth the CDT works perfectly on that computer to install clients; however, the customer needs this turned on so this is not a permanent solution.

Is there a way to configure the CDT to not require a password?

As an aside, the computer on which the customer installed the CDT is the only one allowed to access the other computers where we want to install clients so running the CDT from a different source to install these particular clients is not an option.

Any ideas?