There has been a case now where this has been tested and the right to withhold the password for the reasons stated was upheld, now judicial precedent has been set I would hope this will help define the legal situation for any future cases of this nature, hopefully anyway.