Another point. Can we change passwords? Looked at the code and it seems the config file contains hard-coded sha1 hashes right? Maybe it can use the mocha passwords, the ones we can modify at https://xfce.org/. Nick