untested password support