Richard,
I'm aware that if Kix were to decrypt in batch that a memory dump would defeat it. What I suggest, is that it be done byte by byte as it is being interpreted. A public key encryption, like SSL, is what I'm suggesting.
Your suggestion to pass the password as a parameter through the User Environment Profile is worth further investigation, but most have concern about reverse engineering.
It is often said that locks are for honest folk, and compiling to p-code would hide code from honest folk, but high encryption would keep more folk honest.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
