abridgett didn't check after posting, and so didn't catch some weird formatting. They are making two separate points:

- the onus is on _you_ to "prove" that you don't know it or have forgotten it

- you can be told not to reveal that you've told them the password