Would be great if passwords also could be flagged.