https://www.andrewhoog.com/posts/password-hints-can-be-a-good-thing/