security: allow passwords to *not* be stored
password docs, options for ESO too