did you notice that messenger keep unencrypted logins and passwords in /home/user/.purple/accounts.xml ?