Sounds like a right pain in the arse trying to keep up with who's doing what. Maybe the conversation will bring things to light, not that I can offer much at the moment. Just sitting here asking the obvious.

How secure would you consider this current method to be?