https://also.kottke.org/09/06/stop-masking-passwords