I got to thinking this may be only indirectly a JCL issue. The original issue may be a password outside of JCL, in an FTP command stream for example.
It was not part of the original post, but if a password is required, then a userid is also probably required if it really is a JCL issue, as opposed to something like an FTP command stream.
I also got to thinking, is the original poster preparing input on real punched cards (remember them?), when a userid and password are probably required. Finding a real card reader to use with those real punched cards may be difficult! The last 2540 I can remember myself was phased out in the middle 1990s, and it was mostly used for punching cards, though given the intended use of those punched cards I suppose they were read using the 2540 after more stuff was manually punched into the cards.
Well, after all the abuse we gave the original post, we may never know.