I think he meant for the whole file to be encoded as one message, so the pad would only be used once.

Once, that is, for every time the file is modified. Does it really make sense to update the key in the script every time the file is modified?

And does it make it safer? The hacker now needs to get two files instead of one, but you'd think he'd be able to get both if he can get one.