Password managers' promise that they can't see your vaults isn't always true