Disallow passwords > 12 chars for good measure