Add infrastructure to allow passwd-protected settings