Hi, Grzegorz
Unfortunately, in_forward doesn't support any security feature right now. It's intended to use within a internel network, but i know some users use it with ssh tunneling.
But yes, this is the required feature. Do you have specific requirement for this? Only password protect is fine?
Thanks - K