This isn't necessarily a bug. For example, we'll get a None if
there was no valid helper for the target relay.

- Allow one password per helper relay
- When measuring RelayFoo that happens to be a helper, don't use it
as a helper for that circuit