Adding a password to the VPN service?

I just got the VPN service running on my Orbi. It works great, and after a couple hour of playing with the settings, I can now route all internet traffic through the Orbi, which is great when I'm at a cafe somewhere.

What makes me extremely worried, though, is that there is no password authentication, which means anybody with the certificate will immediately have access to my internal network (I almost e-mailed the certificate to my wife so she could get it working on her laptop too, before I realized that's more or less the same as sending her my login password in the clear--not a good idea).

Is there actually a way to set up the Orbi VPN server to require a password? If not, when will Netgear implement one?