Add a field `misc.have_i_been_pawned: true/false` which makes an API call to https://haveibeenpwned.com/