extract password into a data bag