Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS