Couldn't the messages be encrypted using the user password?