There were no plans to password protect images, but that's a good idea! For now, the post key itself (after the # in the URL) somewhat acts as a password.