update to prevent anyone from storing passwords.yaml files