use pillar for password