Martin Wirblat wrote:

> 
> The optional encryption of the whole image or a project on the VM-level 
> would be another interesting alternative for the broader problem (as I 
> see it).
> 

Perhaps in a future world of loadable, concurrently running and 
encryptable projects a password manager could silently load two 
projects, one unencrypted with scrambled passwords which the user can 
use without supplying a master password first and another one encrypted 
with more sensitive passwords.