I got it, some guys come to our server and invite my admins to some IP-s where they have rcon, and then use "rcon users" and "rcon user xxxx" where xxxx is number of my admin on their server, and then he can see some settings and among that _pw.
So I have solved this by connecting amx to steam_id instead of _pw
