make sure I don't load passwords until the end...