add warning about using RSYNC_PASSWORD on systems where env varibables