arrow and passwd reqs