Hmm. I feel like conflating a subdomain with a password is a particularly sketchy idea, but you do you.