Rather than try to protect the directory, maybe you want to work on encrypting the contents of the file. Maybe you want to look for an MD5 module such as
or some other encryption module. For that matter, if this is a unix system, and everyone has their own account, you might just want to check against the unix password file. You'd need some modules to help you read it, but it could be done.