New addition to the WCE FAQ: "How can I prevent WCE dumping my logon password in cleartext?"
http://www.ampliasecurity.com/research/wcefaq.html#preventcleartextpwddump
http://www.ampliasecurity.com/research/wcefaq.html#preventcleartextpwddump