Who controls the ROI on your password management tool?