I am aware of that, but in the case of one being an administrator, that is the purpose of the script.
It could also redownload the .mrc file that handles the password each time (and delete it after its done) to prevent it from being modified (assuming that the script wouldn't exeed a few KBs, could also archive it).