More than just a password: Cybersecurity lessons from the Louvre heist