externalize id/pwd