A new plugin bzr-wincrypt stores passwords encrypted in the Windows CryptoAPI keyring.