What's to stop someone from "forgetting" their password?