[mcpackieh]

It would limit the scope of the damage. Instead of getting the entire password database, the keylogger would only get those passwords that were used while the system was compromised.