#3 - persist CertificatePassword