i recompile a kratos binary to add log to net/http.Client.Do function, and found this. UPDATE: disable

selfservice.methods.password.config.haveibeenpwned_enabled

[2023-11-30 03:05:33.335319799 +0000 UTC m=+107.237476855] gitops-debug,host: api.pwnedpasswords.com, uri: /range/4545F, req: &http.Request{Method:"GET", URL:(*url.URL)(0xc0019a3b00), Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{}, Body:io.ReadCloser(nil), GetBody:(func() (io.ReadCloser, error))(nil), ContentLength:0, TransferEncoding:[]string(nil), Close:false, Host:"api.pwnedpasswords.com", Form:url.Values(nil), PostForm:url.Values(nil), MultipartForm:(*multipart.Form)(nil), Trailer:http.Header(nil), RemoteAddr:"", RequestURI:"", TLS:(*tls.ConnectionState)(nil), Cancel:(<-chan struct {})(nil), Response:(*http.Response)(nil), ctx:(*context.valueCtx)(0xc0000c6060)}