Your RCON password is stored encrypted with a key the web server does not hold, and every command we send is in a log you can read. Two things we will not hide: Rust itself has no TLS, so the password crosses the network unencrypted on every connection, and changing it later needs a server restart. Consider a dedicated RCON password.