Concede the war on known good vs reference passwords