These two rules seem to further support my theory of what they are doing: * Must not contain more than 4 sequential digits (ex: 1234, 76543) * May contain the following special characters: "%'()+,-/:;<=>?\ ^_|