Passwords are getting regulated by law