When encfs is started with the --ondemand option, it should not ask for the password until the first time the encrypted directory is accessed

Pretty much as the summary says. Currently, when you mount an encfs filesystem with the --ondemand option, it asks for the password right away, even though the directory has not yet been "demanded". This is not a behavior that makes sense for at least my use case for the --ondemand option (a ~/Private directory, which is mounted using encfs at login time).