Frequent password changes are the enemy of security, FTC technologist says