[ilyt]

Most orgs are incompetent. We had same discussion with many of our clients, where their requirement was stupid shit like "change password every month" while we had to negotiate that no, we don't even use passwords in the first place, we use hardware tokens for SSH keys.

And I'm talking about few big local banks, where accounts on Red Hat boxes are still created by some ops dude manually according to some docs.