YahBible split-key auth -- one encrypted half of each credential (OTP-split; useless without the HF half + the password)