We've used pennywize for several years now. It works pretty well but is far from perfect. We're going to switch to strongbox soon to see if it does a better job.