No, unfortunately it still writes the password to the .oscrc file. After deleting it and the cookiejar as well, osc asked for my password again, but it went again to the .oscrc (without any KWallatManager permission dialogues).