base manager xml
use insecure tomcat manager password, and restrict to localhost only access
write jmx creds; can be insecure because ssh access required
reformat setenv; add jmx config