password manager audit