I think what's happening is that when you are the person who locked the chest, any password will unlock it, similar to how /change doesn't need...
Separate names with a comma.