Allow admins to set the password requirements for user accounts to the NIST standard of 16 characters. Right now the limit is only 6 and that is not enough for a product that controls remote access. The other option of changing the password every 90 days is extremally inconvenient to the end users.