Right now the standard practice for leagues is to have a private server and give out the password by email or in a private forum. Wouldn't it be easier if you could enter some LFS accounts into a whitelist file and set your server to only allow those to connect? LFS usernames have to be verified by the master server to connect so it's already secure, plus there's no risk of leaked passwords. It would save a lot of the effort in playing email tag to distribute or announce passwords, especially in some leagues where they're announced or sent at the last minute to minimize leaks.