for now use some kind of admin protection, though you can see the password!