--- clogin	2011-11-30 22:41:10.000000000 +0000
+++ newclogin	2012-02-08 10:04:39.000000000 +0000
@@ -311,9 +311,15 @@
 	send_user "\nError: $password_file must not be world readable/writable\n"
 	exit 1
     }
-    if [ catch {source $password_file} reason ] {
-	send_user "\nError: $reason\n"
-	exit 1
+    if { [info exists env(CLOGIN_KEY)] } {
+        set clogin_fd [open "|openssl enc -d -aes-256-cbc -pass pass:$env(CLOGIN_KEY) -in $password_file"]
+        if [ catch {eval [read $clogin_fd]} reason ] {
+            send_user "\nError: $reason\n"
+            exit 1
+        }
+    } else {
+	send_user "\nError: CLOGIN_KEY environment variable not declared\n"
+        exit 1
     }
 }