the vault pass for prod; obviously, this password will not be committed to git