OK, slight panic there. I didn't realize that ~/.pgpass was saving login passwords. Still, it was alarming.
Lesson: periodically review the invisible files in your home folder. A lot of *nix ported software puts stuff there instead of standard OSX prefs and support locations.
I'll return Bonjour support some time in a future update, it's not critical feature.