A realistic password strength estimator.