https://www.sans.org/reading-room/whitepapers/bestprac/password-management-applications-practices-36755