Static password flow

This query flags locations where a static string is used as an argument to a function requiring a strong password (e.g. the password argument for a password- based key derivation function).