Will the admin create a new SSL cert and enable SSL/https logins? This would go a long way in protecting most users passwords...