#474 set default to checked for secure passwords