Browsing: Master password architecture risk