Their password requirements sound like it was designed by an incompetent committee.