add The Apache Software Foundation to the NOTICE.txt to acknowledge code brought in via a Jasypt import
rename PasswordCredentials.getInstance() -> newInstance() to indicate a new instance is always returned