Don't show PIN in exposed/weak password reports

Some website only allow 4-6 PIN.

The probability of them being exposed/weak is very high.

This cause dozen of useless entries in these reports. Consider hiding such entries