On Semantic Patterns of Passwords and their Security Impact