I'm missing something here. All revlets are in a "compiled" format that cannot be reverse-engineered back to a stack, whether or not a password is applied. This is similar to the .swf/.fla distinction.