passwords protected, modeler less greedy match