Found out @asmallorange is storing root VPS passwords in clear text. They refuse to stop. Very disappointing.