Subscription publishers wrestle with password-sharing