I asked if he had a SecurID. Just as I expected, the answer was yes, so I said, "Let me pull your SecurID application." This was a gamble. I knew he had probably filled out the form ages before and probably wouldn’t remember whether it had asked for a password. And since I already knew that one of the passwords he used was "mary," I figured that would sound familiar to him, and he might think he had used it on the SecurID form.