All hosted software must not: Access existing saved passwords without explicitly notifying and getting permission from the end-user? ~Cameron