security question

[Phil R Lawrence]

OK, I've settled on either importing our entire ERP source with -kb or 
writing a script to traverse the sourcetree and check in the files 
intelligently as either binary or text.  (anyone already have a script 
that does this?)

Now, about security.  We would be a multi-client shop, so I need SSH to 
encrypt sign-on info.  Also, to make auditors very happy, we need to 
grant and deny write security to various projects in the repository.

I saw in the docs how to set up pserver and how it can manage read-write 
permissions.  But I won't run a server without encryption.

How can I have SSH *and* locked down projects *and* locked down CVSROOT dir?

Security is very important.

Phil

PS - are there any windows and linux clients that particularly shine 
with SSH?