Nihilistic password security questions