[rsfern]

For this particular issue, it took a while but the NIST password policy does follow 800-63 now. They changed it a while back.