For the bunker you're accessing in the background of all of this, or am I totally not getting this right!?

Instead of the nsecbunker token + npub, you'd use password + login address.