The position of the displayed insertion point appears to be based on the
width of the text that is typed (the password) rather than the text that is
being displayed (the asterisks). This results in the insertion point being
displayed either too far to the left or right depending on the relative
widths of the password characters entered vs. the asterisk characters being
displayed.