Do other companies seriously not do this? I would think that is a basic security concept at this point. Then again, I've seen worse security practices at companies.