Given that this is on `keyup`, and it invokes the password strength indicator, is it worth debouncing the event to include a slight (50ms) delay? Just so it won't fire on every single keypress but only after a short lag.