... until the collector arrives ...
I discovered that Mozilla Thunderbird supports NTLM authentication for POP3 (and IMAP). It is enabled by checking the 'use secure authentication' checkbox on the account server settings panel. No more cleartext passwords!