How Gradm protects its own password ?