replacing compromised biometric authenticators