there is also a disconnect between password requirements and automatically generated passwords, where often the auto-generated password contains prohibited characters.