Do not export passwords and prefer groups

Ernst van Nieroprequested to merge
evn-no-export into master

Closes https://gitlab.com/gitlab-com/infrastructure/issues/2827

\cc @rspeicher @brittanyr @sytses

I'm also reviewing if there is a good spot to add this to the onboarding checklist.

Merge request reports