Lessen the number of places we will need to change if password rules change.
Add reminder that I should replace the nspec tests.