1Password has confirmed a security incident. What does this mean to users and the safety of their password vaults?