I agree, this would be the best action for both the user and host. I'd add a check on the host to make sure the data looks random as well to protect against rou

I agree, this would be the best action for both the user and host. I'd add a check on the host to make sure the data looks random as well to protect against rouge or malfunctioning clients that attempts to store plain text. Encryption must be mandatory and enforced, this will prevent so much pain for all parties.