Towards Secure And Usable Leakage-Resilient Password Entry