Yea, that's what I gathered as well. So what do you think about checking against compromised passwords?