In an era of password leaks, Netflix tries extreme vigilance—with mixed results