Nitpick: Moving this in an "else" for `if cls.is_staff_password_reuse_restricted():` would make it clearer, and would give a clear failure if a case end up unaccounted for in a future change