subtler icons, script only runs on pages with password fields