Simply treat the response like a password, and be sure it doesn't leak on some systems.