make the password prop non-enumerable to guard against unexpected output