> I can't just see the passwords for those users, that's not how it works But you _could_ likely install a malicious ssh server, bash binary, or whatever, that

> I can't just see the passwords for those users, that's not how it works But you _could_ likely install a malicious ssh server, bash binary, or whatever, that logs them for you as people enter them.