well, strictly speaking storing the password itself is a good hint, no?