Let's give him the benefit of the doubt (but no more information!) until he explains himself.

I can imagine legitimate purposes, most involving bypassing "the right hand doesn't know what the left is doing" breakage internal to organizations. "Oh, yeah, so-and-so had access to that intranet site, but since they left nobody can find the keys. Just work around it any old way you can."

That does happen.