Hmm, so maybe vip params default to '', and passwords we put in seeds (or fix up gilles yaml revamp and put them there)?