doh
Why, yes, I did in fact manage to upload a page to my website with one of my passwords in plain view. And, thanks to my site's googlejuice, it's already cached, indexed, etc. Fortunately, it's only in use at one public point and I've already changed that.
