tweaked password extraction from conf file