passwords are now obfuscated before writing to disk