Then you still have two users with a complete password set, from which you can either reconstruct the third permutation or generate a new set.