Nah, better to run those tests and chastise employees who fall for it.

After all, it's not that they're routinely required to enter their password on an endless list of websites all the time to do their job right? Right?