in reply to hiding passwords

I don't see how encrypting it would help. If the attacker has access to the core image, he would surely have access to the decryption key as well.