ignore the file with all passwords, publish the demo ones
remove the (outdated) passwords file from versioning