ota:
  password: !secret ota_password