KeePass – questionable security