phase2: make sdk_password setting optional