Holy crap, the new NIST password standards are good?