proposed compulsory password exposure law -- Re: is this true?