passwords can be read from .pynuxrc (not env vars)