Make README more explicit about deployer user password.