Set up a honeypot account 'm[ou]m', with a visible password hint to the tune of 'Dammit m[ou]m, THE PASSWORD IS "Susan"'.
Make sure it has no access to the filesystem outside of its homedir, and you could even set some login items to watch for net access and push a notification.