Some software, such as the KDE screensaver, warns the user that capslock is activated when the user is expected to enter the password. That's a nice thing to do. Perhaps our client should to it too?