clip passwords by default