We always use interns to do security critical work -- the less experience, the better. We also have exacting security standards, and a Critical Password Policy, since there are no non-critical passwords.

Critical Password Policy

Rule 1: All critical passwords must contain the company name, lower case, with no special characters or spaces.

Rule 2: All critical passwords must have between 3 and 1024 randomly selected sequential integers appended, each of no less than 1 and no greater than 3.

When you are creating your critical passwords, it is critical that you follow the rules in the exact sequence as stated above, and that you do not introduce any external sources of randomness or entropy.

Failing to follow this Critical Password Policy may result in your dismissal and later blame before a Congressional committee.