On the passivity of metals