I never thought about the delete access aspect. That's a good point. Plus, since you never give a password, you don't have to worry about how they're storing

I never thought about the delete access aspect. That's a good point. Plus, since you never give a password, you don't have to worry about how they're storing it. Plain text in the database? passwords.txt file in the webroot? Doesn't matter because they don't have it.