websites be like “your password is not secure enough” and then don’t allow the scarab