Secret password

(Builds on #10.) Do not expose password to the configuration form.