As long as PCI, or ISO 27001, continue to require password rotation policies, it will be hard to implement for some companies, depending on the infrastructure and who has access to what. Hopefully we will see more things following the NIST guidelines, since it's a pretty ineffective way of ensuring security.