Cultiv8r,
Well the encryption method should be known to all developers but only the password should be known by "registered" developers, from the GDF.

Also the GDF should alter the password every 3 or 4 months to eliminate the possibility that the password be known by others.

Other suggestions?