Template:FAQ:Agent 26

This is deliberate.

The agent removes the (human-readable) 'createUser' directive, and replaces it with an equivalent 'usmUser' entry. This contains the same information, but in a form that's only meaningful internally. Not only is the passphrase no longer visible in the config file, it has actually been converted to a key that is only valid on thhis particular system. If someone stole the configuration file, they could not use the information from the 'usmUser' entry to access any of your other agents (even if the usernames and passwords were the same).