Eliminating identity-related breaches