A contractor stored credentials in a Google Doc set to "Anyone with the link," and Google Search autocomplete eventually surfaced the password string.