put back the /pswd in disk endpoints; will have to track down which calls give it already and which do not