You mean you're trying to block the bot-runner from using /debug? Whoever's running the bot could simply change the code so he didn't need a password to login, or simply look at any data stored (unless it's been encrypted). Bottom-line, a person running a bot will always be able to view what's being sent to his computer, there's no way to stop that. Making your script try to dictate what someone can and cannot do within a program on their own computer like that comes off as very underhanded, I can say with certainty that any users of your script certainly won't appreciate it, and any users of the bot won't be 'protected' in any way because of it.
