This idea is based on trusting users: Either a user can uses derivationSecret or it can't. This means a users which can't can't build live-cd's if they contain passwords. Bad for automatic testing. Marc Weber