support multiple passwords for credrolls - plus tests