*: Fix the condor-annex-ec2 service file by copying the =After=...= line from the =[Unit]= section of =/usr/lib/systemd/system/condor.service= to =[Unit]= section of =/usr/lib/systemd/system/condor-annex-ec2.service=.
 *: {term}rm /etc/condor/50ec2.config{endterm}
 *: Edit =/usr/libexec/condor/condor-annex-ec2= so that it _only_ sets =EC2PublicIP= and =EC2InstanceID=: remove from after the "Annex-specific code begins here" comment (line 103) all the way down to =echo "done." (line 252); leave that line but remove next line and change the return to return 0.
-*: [FIXME: install pool password, do ~/.condor/user_config hack]
+*: Run {term}condor_store_cred -c add -f `condor_config_val SEC_PASSWORD_FILE`{endterm} as root to create the pool password file.
+*: Then copy the pool password file to =~ec2-user/.condor= and chown it to that user; then edit =~ec2-user/.user_config= to point to it; this allows =condor_annex= to copy the pool password file to the new instances.