Oi! I decided to register! :D I can't believe so many people replied already.
Anyway, it doesn't matter if it's on the SD card. I want to password-protect it so that my brother may not use it. So it won't need to be in the NAND, and he won't be flashing the firmware or holding select and start...