Here is interesting collision: password IS thing in my mind, for sure.

But, as far as I understand, case law is not in my favor in this case :-(