Turns out we're using a sans font in our central password store which is stupid for the same reasons.