use encrypted passwords by default (request from Oliver Etrl)