turn on KEEP_PASSWORD_SERVER_OPEN by default