In order to secure the access to the REST API of the TIBCO ActiveMatrix BusinessWorks Agent, which file controls the setting that enables security and which types of passwords are accepted?