/etc/burp/clientconfdir, it has a hardcoded password, spotted by florian@. clean up some other @sample problems while there.