- factor password generation into lib/random.Password - call from appropriate places - choose appropriate use of random.String vs random.Password