We have assumed there is one person in charge of the entire internet. That person is then responsible for communicating password information to all the local administrators -- even between continents.
If there is more than one Security Zone on an internet, then the AppleTalk Remote Access server needs to have the right password for only one of the zones.