I think you should have a discussion section where you talk about potential implications (possible password leaks via S3).