why shouldnt the average user write down his/her master database password and store it in the kitchen drawer?