Probably because password distribution is easier than accessing the file and adding the information.
I think you need to be more specific on the data you want to check.
In my situation, it's extra authorization data input by user. I do know online-mode, whitelist, authme plugins, but I still need another password-like thing for a special server. It is asked when minecraft started by popping up a input box, and I want to verify it before player joined server.
It would have to be a server and client mod. You will need a custom gui and custom packet.
yeah I've written a gui to allow user type in information. But how to use custom packet? I have used SimpleNetworkWrapper before, but is it possible to use it before player joining world and prevent login if verify fails? Any hint of which class or event I should use is okay...