move (temporary) fake passwords to config file