remove flag as passwords are always encrypted