implement password security for files+status