In the current implementation, it doesn't show them until after you type the fifth character, to prevent exactly this kind of attack. They also replaced the hi

In the current implementation, it doesn't show them until after you type the fifth character, to prevent exactly this kind of attack. They also replaced the hieroglyphics with a key chain, which implies that at some point someone actually redesigned this wacky features.