Have your son create a new plex account using his own email address.
then add his new account to your home.
then remove the old managed user for him.
as long as he is a member of your home, he won’t need plex pass for his device unlock (only mobile devices need unlocked anyway).
once he has his own account, then he will have his own user/pass that he can log into whatever devices without knowing yours.
