i give up - password as plaintext. Worst case: someone wipes the deployed app... N'yah