I used to work with a system that 'conveniently' silently dropped leading and trailing space in its password field (and also just copied the password into an https-URL without any encoding, so no special characters for you). The guys who committed this crime thought that only weirdos like me have such strange passwords..