Lol. I was thinking maybe more don’t send a password to haveibeenpwned and just use your own service?