optionally hardcode default password in secret properties