It's also interesting because NIST doesn't generally follow these rules, since they don't use passwords (at least for most things).