You dont want to give them the sys password. A good "politically correct" way of saying it would be that you do not want any user to create user objects in the sys schema, thus, you cannot give it to them.
Better still, question them till they get fed up and stop asking for it.

-Chintz