I can't find it now (can't remember the name used) but I had referenced a webpage for an online authen system awhile back that "solved" that problem nicely. I'm probably going to mess up a step by rushing but it went something like this:
So the hash on the server changes everytime the login is successful, without changing the password, and it doesn't inconvience users. Also there's nice javascript libraries for things like md5/sha that do not take noticeable time on any client I've tried.
Almost sounds like any app launcher could be a door and the exit widget a back door.
Riches: A gift from Heaven signifying, "This is my beloved son, in whom I am well pleased." -- John D. Rockefeller, (slander by Ambrose Bierce)