When the client opens, it invites the user to enter their password and decrypt it. The original purpose of this was to get users decrypting for minting.
However, the initial decrypt opens the wallet entirely (including for transactions).
Can this be fixed for the next release, so the initial decrypt applies only to minting? Otherwise, it represents a potential security risk.