store a password as plaintext is dangerous and should not be the default