mark password resource as sensitive