yeah, that's what I mean. Provide a service that reports back leaked working credentials so that the service provider can lock down the account.