first pass at the password encryption docs