Set the remote_login_pssswordfile=exculise and use the
orapwd utility to create the password for internal .
connect to the rman and then connect to target or recovery.
otherwise users can see your passwords when u are connected ..