If I adhered to standards I would have forced password rotation (a shit policy) because the standards are behind me. They only recently changed. I was right all along. I literally protected people's data when the standards would have put them at risk. No, thank you.