Question: in C#, what is the proper way to handle sensitive data such as a password?