ps 'When was this implemented' I mean with regards having a long password not good enough and having to have a public key as well. clarification.