described in the proposal at:
http://dev.zope.org/Wikis/DevSite/Proposals/EncryptedUserfolderPasswords
There is now a "properties" tab in user folders where you can
select whether passwords are stored encrypted.  The only question is
whether it should be initially on or off.