use constant for masked grub password