Should this use `Digest` auth to prevent passwords from going over the wire in cleartext?