If we do this, the level of security should not be public. (The whole point of having locked entries is that people who can't see them don't see evidence that they're there.)

Also, I would want to be able to set the password either per-entry or per tag, so that giving someone access to one password-protected entry wouldn't open up any other password-protected entries to them.