Thinking of a brilliant* password updating scheme creates a weird solitude. You want your brilliant scheme to be appreciated, but if you tell anyone what it is, its security is undermined.