I'm more worried about the fact that to password is almost a bad as plain text in the registry (DES encrypted, but with a known key). I wourk on a campus LAN so there are plenty of folks we can't trust.