why is using passwords to protect pdf documents not enough to safeguard against information leakage