When a PPP account has a password that has shell metacharacters, the "PASSWORD" entry for that account gets filtered out by readhash, which causes the password in the secrets file to be an empty string. This obviously causes PPP not to work for these cases.
This was in the wrong category. Moved.