Password replacements are like septic systems, everyone needs one and nobody wants to do the work.