I really dislike using embedded passwords in scripts. There's all sorts of reasons that I don't think it's a good idea. So I would suggest - configure SSH to authenticate via public/private keys. You need to look at the documentation for 'ssh-keygen' and 'authorized_keys'. For bonus points, you can inhibit command execution via the authorized keys file, to limit what a remote user can do.