Password encryption/decryption should happen at the model level

Live and learn.
Encrypt/decrypt password for NT4/AD in model level as well
We should not be catching exceptions from CheckForUpdate

At least not every single one.