Improved handling of passwords (encrypt upon storage, clear when fetched)