You probably can't trust your password manager if it's compromised