One more question please:
Can the use of a master password be enforced?
No. How do image this would work? Would use be required to set up a master password on a first run? Or disallowed to save a password, unless he sets up a master password?
Thanks.
Both options you mentioned would work. I admit it would be a bit annoying for users.