buildpack: fix password replacement