bugfix:  everyone can access the pass.txt file