the plaintext password is in var/passwd