explicitly state the PasswordText attribute