Give in: reveal password in default profile

For a demo it's just not worth the effort to keep the password
safe: put it in the config file with a comment.