heh, how secure....
you can obviously set a user/pass for webmin, but something ou may not be aware of is that you can also restrict access based on IP so that only people on your LAN can access webmin, or even tighter so that only someone on the server can access webmin.
That's under webmin...