set up a magic password that isn't hardcoded - its used programatically only
stop using the canned passwd file