[danvet]

In all the discussion here, I think yours is the absolutely best analogy. Perfectly illustrates the cost of brute-forcing versus the accused just revealing the crucial little information. Even informed guessing of the password is covered (the accused was seen lately in that corner of the Mojave, maybe the box is there?).