Well that seems to open up a loophole. Send them the password-protected document. Don’t send the password since it wasn’t explicitly requested. Could even use a one-time pad for good measure since it is just a really long password.