@matthew @mkj This is the way. Passwords are great _if_ you know how to handle them, and how to choose them.

That being said, I do use password protected certificates for my own servers.