What about "clear text" login/username . The login is half of the login/password authentication scheme. Also someone can inadvertently type in their password at the login prompt.