Several issues recently have tried to look at fixing issues with the password field being autofilled. The general consensus from browsers is that "You're doing it wrong" and that we are abusing the password field for things which are just secret and not true passwords.

The suggestion we've discussed numerous times is to create a new field to act as a password field and to behave as such, but to not actually be a password field.