don't put email in plaintext