How to protect plain-text passwords in local.conf