When said credentials have been leaked elsewhere, they aren't "proper" anymore.