add secret encryption or some kind of secret_command thing

[actualben]

Even with restrictive unix permissions it's not great to keep cleartext passwords in files on disk. Some in-place encryption or something like that might help.