should we be worried about the case of actual non-ascii characters in password?