[pytest-dev] keeping passwords out of code