sfCodeBase from a password protected http site

Hi -

I have sfCodeBase (for remote class loading) in my components  
pointing to a password protected http location. For now I only have a  
basic http server authentication(username/password). Is there a way  
of telling smartfrog to load jar files with a username/password for  
server. or is it necessary to have jar files on a server without  
password? Also is there any other way to protect the remote loading  
jar files from being publicly visible?

thanks again for the help!
Sanjay