A quick workaround is setting a shapeName on a static shape (like an invisible hat) and then mounting that to the player's head, so it's not like it's hard to do without the password.
You can't mount static shapes, items, or vehicles to a player, so none of the alternatives are possible.
In v0002 you could mount static shapes to a player, but not in our current version.