just like PostgreSQL, use a default password in case yml is missing from the environment