avoid necessity of using plain text passwords