Bandit reports this error: >> Issue: [B105:hardcoded_password_string] Possible hardcoded password: 'init password=%(password)s%(totp)s The password is of course never hardcoded there.