Ted, although others know much more about the specifics of your question, I'd like to put in my two cent's worth regarding the pitfalls of excessive security zealotry. We have a few systems that we periodically use that require frequent password changes, non-dictionary, numbers and characters, etc. The end result is that the passwords get written down and posted near the computer of the user. IT people seen to forget the human factors aspect of security.