How can I tell Drupal to add autocomplete=off to the login form I'm under pressure to close out some issues from a Qualys scan. One issue flagged was 


  150112 Sensitive form field has not disabled autocomplete


Suggestions include adding autocomplete="off" to the username and password fields. 

What would be the best practice way to achieve this?
It seems there is a module for this, No Autocomplete.
As a sidenote (copied from the module's page:


  However, browsers and password managers and the like may very well not
  respect the "autocomplete=off" attribute anyway. For example, Chrome
  seems no longer to respect it and Lastpass ignores it by default.


Well, good luck with Qualys!