remove script without exposing password