improve encrypted repo password mechanism