password protected config variables