Until we can start using Tcl 8.7's zipfs we should look into leveraging unzip -P xxx as an external helper command to extract from zip files protected with passwords.