I just ran a quick test with Version 4.2 SP02. The Runscript Operator accepted both "Username!" and "Password!"
The process fails as those are not valid credentials, but they were passed correctly:
This may have been changed in the newer release.
What version of PAM are you having this problem with?
What exactly are you entering into the password field?
Are you wrapping your password in quotes?