I don't think its worth getting too complicated with it... After all the "password" is sitting right there in the HTML
file. No matter how you generate it, someone could easily
slurp it up and use it for nefarious purposes. Luckilly, troublemakers usually don't take that extra step, they just move on to the next MSA site.