I notice that when I do tnt-open without specifying a
tnt-default-password, I'm prompted for a password;
however, the password I enter is saved in the global
minibuffer-history variable. This is a security issue,
though, since that history gets re-used all over the
place; I think fixing it is as simple as changing (in
tnt-read-from-minibuffer-no-echo)
(read-from-minibuffer prompt "" keymap)
to
(read-from-minibuffer prompt "" keymap nil t)