while creating a scheduled task with username & password (and for the file too ) means it got created/updated in the cfconfig.json file. But editing the scheduled task and setting the username and password field to empty, didn't remove the username & password keys in the cfconfi.json file. So after restarting the lucee, the username and password values exist for that task.