Yep, that's what I meant. Pretty sure my company does this, because they can detect this, and I know enough of our IT to believe they're not storing passwords in plaintext.