Clarify that some characters in passwords may need escaping