People forget their passwords all the time, even after using them regularly for long periods of time. Unless we want to risk keeping people in prison their whol

People forget their passwords all the time, even after using them regularly for long periods of time. Unless we want to risk keeping people in prison their whole lives in order to compel information they simply don't have, wouldn't a simple 'I forgot' have to suffice, even if it's for a device proven to belong to the suspect?