Deprecating URL passwords in cache_object://

I'm thinking about adding some functionality to cache manager that
requires passing it arguments, but the current format is getting in
the way;

     t = sscanf(url, "cache_object://%[^/]/%[^@]@%s", host, request,
password);

AFAICT the @password suffix on the URL is deprecated; cachemgr.cgi and
squidclient both now use Basic auth.

What do folks think about removing support for @password in URLs?

Cheers,

--
Mark Nottingham       mnot_at_yahoo-inc.com