Placed in the mqtt/config direcory. The password file has to be 'touched' to get the container to stay up and then you log into the container, remove the file, then use an in-built utility to create a new file , with user name and password