Why You Should Protect Your Security Answers as Strictly as Your Passwords