ignore web deploy settings by default

web deploy settings include unencrypted passwords