Password is definitely a must. Maybe you could also put a password on the rar file? That is, if it's something that is downloaded :)
There was also someone who suggested posting it on a weekend when most of the staff is out. That's also a good idea. I once played a game where they only fix bugs on Mondays, since they have no staff working on weekends.