UPDATED README changed defaults so only passwordless set