remove recoverable password attribute