Don’t worry about search engine bots violating the robots.txt file of your website. If they do so, they have to face severe legal consequences, which is why they have no option but to respect your robots.txt file.
Web crawler can't access to your password protected pages. Also, you can disallow them using robots.txt but it can give idea to the hacker about your protect directories.